Analysis

  • max time kernel
    120s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25/01/2024, 22:14

General

  • Target

    75a4d845783eb6ff589b82967c2e611f.pdf

  • Size

    86KB

  • MD5

    75a4d845783eb6ff589b82967c2e611f

  • SHA1

    af207d4c80208bb3d0c184ab4b8ee3e9dee09cdf

  • SHA256

    dcec74218b55b5d467da06b6540f7309a13072c8a58b2dc09b27e4a6252c173a

  • SHA512

    5adbb83a1417ad94171d24d0df44ddcafc734c21d53f20f3ebbc5518f923f79b2b14cb54c6b649feba61694d3caf3ef32592316778f8af84d81bad7a70898e61

  • SSDEEP

    1536:Bv4EYwZyKclJ+9xOJjOt5U2DwHk4BJwUsed5bJxnmVtOlW8pOGOWspAi0IWOXg6g:6EYQyJqsUEkKk4Bhsgl4tOQGOWspD06I

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\75a4d845783eb6ff589b82967c2e611f.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2788

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          0908a2ccb617f3e3f22e891c78c49ca4

          SHA1

          3b571bb6a47461388d3075fed99f07f4b629b490

          SHA256

          e1139c8f7e1fb21087aff590d901ff9aaf4852b8358b1feeb27a6c6288082277

          SHA512

          ddd8a8e49231906972dbfc06e8ecc4ffc8eda187b79d430a020e56db7ebd1c1bc8a5aac93368f13307b9937c6bb04c97c7d970e676b8494fcebda921df95a51f